by rokundev on WordPress.org
Completely disables PHP file editing through WordPress admin.
Secures your WordPress installation by:
Block user access without deleting accounts. Prevent specific users from logging in while preserving their data and content.
Easily and safely change the WordPress login URL to anything you want. Makes wp-admin and wp-login.php inaccessible for enhanced security.
Mask admin user IP addresses - both historical data and future activity